6) (Anti) social networking

Social networks like
Facebook and Twitter are fabulous platforms for sharing information and
news. Retailers of all stripes have tapped into this and are using them to get the word out – virally – about discounts, sales and
in-store events. Unfortunately, mechanisms for vetting online reputation
haven’t quite kept up with the marketplace, which can make social networks an ideal platform for
social engineering attacks.

Social networks like
Facebook and Twitter are fabulous platforms for sharing information and
news. Retailers of all stripes have tapped into this and are using them to get the word out – virally – about discounts, sales and
in-store events. Unfortunately, mechanisms for vetting online reputation
haven’t quite kept up with the marketplace, which can make social networks an ideal platform for
social engineering attacks. Facebook wall posts and tweets from an account that appears
to be associated with a vendor are no more trustworthy than links in an
unsolicited e-mail, and shouldn’t be given any more deference. Security firm
Trustwave advises users to treat such solicitations with suspicion, and we think that’s good advice. If your
curiosity must be quenched: visit the retailer’s Web site yourself — type in
the Web address manually, rather than clicking on the link and risking exposure via a
drive by download attack.

Suggested articles

2020 Cybersecurity Trends to Watch

Mobile becomes a prime phishing attack vector, hackers will increasingly employ machine learning in attacks and cloud will increasingly be seen as fertile ground for compromise.

Top Mobile Security Stories of 2019

Cybercrime increasingly went mobile in 2019, with everything from Apple iPhone jailbreaks and rogue Android apps to 5G and mobile-first phishing dominating the news coverage. Here are Threatpost’s Top 10 mobile security stories of 2019.